Buran Casino Privacy Policy

Data Controller

Rabidi N.V., the operator of Buran Casino under Curacao eGaming Licence No. 8048/JAZ2020-013, registered at Fransie Bloemstraat 5, Willemstad, Curacao, is the controller responsible for the personal data processed through buranslots.com. This policy explains what is collected, why, and what choices are available to you as a player.

What Data Is Collected

Buran Casino collects the information you provide at registration, including your name, email address, and date of birth. Payment data is collected when you deposit or withdraw, limited to what the selected payment method requires to process the transaction. Verification data, including copies of an Australian driver’s licence, passport, or Medicare card and a utility bill or bank statement, is collected during identity checks. Technical data such as IP address, device type, browser version, and session logs is collected automatically for security and fraud prevention. Cookie data is collected as described in the cookies section below.

Purposes and Legal Basis of Processing

Personal data is processed to provide the account and gaming service you have requested (performance of contract), to comply with anti-money-laundering and verification obligations attached to the operator’s licence (legal obligation), to protect the platform against fraud and abuse (legitimate interest), and, where you have opted in, to send promotional communications (consent, which can be withdrawn at any time).

Cookies and Analytics

Cookies on buranslots.com fall into three categories: strictly necessary cookies that keep you logged in and your cart or cashier session intact, analytics cookies that measure site performance and usage patterns, and preference cookies that remember display settings. Necessary cookies cannot be disabled without affecting site function; analytics and preference cookies can be declined through the cookie banner shown on your first visit or adjusted later in your browser settings.

Data Retention Period

Account and transaction data is retained for the period required by the operator’s licensing and anti-money-laundering obligations, after which it is deleted or anonymised unless a longer retention period is required to resolve an open dispute or legal request. Closing your account does not immediately erase historical transaction records where retention is a licensing requirement, but marketing communications stop and the account itself is deactivated.

Transfer to Third Parties

Personal data is shared only where necessary to run the service: payment providers process deposits and withdrawals, identity verification services confirm KYC documents, and game providers such as NetEnt, Pragmatic Play, Evolution Gaming, and the other studios in the Buran catalogue receive the minimum data needed to record gameplay and payouts correctly. Data is not sold to third parties for their own marketing purposes.

International Data Transfers

Where data is processed or stored on servers located outside your country of residence, Buran Casino applies contractual and technical safeguards to keep that data protected to a standard consistent with this policy, regardless of where the processing takes place.

Data Subject Rights

You may request access to the personal data held about you, correction of inaccurate data, deletion of data no longer required for a legal or contractual purpose, restriction of processing in specific circumstances, objection to processing based on legitimate interest, and, where technically feasible, portability of your data to another provider. Requests are handled within a reasonable timeframe once your identity has been confirmed.

The Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you may lodge a complaint with the supervisory authority responsible for the operator’s licence. Raising the matter with Buran Casino’s support team first is recommended, as many concerns can be resolved directly and more quickly through that channel.

Contact for Personal Data Requests

Data-related requests, including access, correction, or deletion requests, can be sent to [email protected]. Include enough detail to identify your account so the request can be actioned without unnecessary delay.